CVE record · CVE-2026-80906

net: packet: fix wrong transport_header when sending VLAN-tagged frame

No CVSS scoreEPSS 0.0016 · 5th percentile

Published by the CVE Program (CNA: Linux) at 4 Sept 2026, 17:19 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
Vendor	Product	Versions
Linux	Linux	affected c2137d565ceb505de69593c181a0543bc4083838 to before a4b82de96d465ddb44bc931145c0fa80c4fe9c9c git affected 9ff46c36df2e0a1ac352f2f4038eaf3f0f7361b8 to before fa86bc52ea8ba981f74f851fd61e2a3d3bc0feac git affected dfed913e8b55a0c2c4906f1242fd38fd9a116e49 to before 5479eb9b355f44745d7ccfe112386bd4f96eceea git affected dfed913e8b55a0c2c4906f1242fd38fd9a116e49 to before e451e20adb869a983a21dda158625f024142e61f git affected dfed913e8b55a0c2c4906f1242fd38fd9a116e49 to before 6971cf319263d6a1b4096f9248aca9e57d77a1eb git affected dfed913e8b55a0c2c4906f1242fd38fd9a116e49 to before f9297abbcaba760b7a7b9d63b839f607f738013e git affected dfed913e8b55a0c2c4906f1242fd38fd9a116e49 to before 6386a6ffa2efba2965ed8e4fa303582c0b76a215 git affected dfed913e8b55a0c2c4906f1242fd38fd9a116e49 to before 01fdecc0480d916c799dbee584833a4a37e94d06 git affected ad3f90a9c4a2c74bb3711f2031bffda4ec44c849 git affected 5.10.163 to before 5.10.266 semver affected 5.15.87 to before 5.15.217 semver affected 5.4.229 to before 5.5 semver Other versions: unaffected
Linux	Linux	affected 5.19 unaffected before 5.19 semver unaffected 5.10.266 to 5.10., inclusive semver unaffected 5.15.217 to 5.15., inclusive semver unaffected 6.1.184 to 6.1., inclusive semver unaffected 6.6.153 to 6.6., inclusive semver unaffected 6.12.105 to 6.12., inclusive semver unaffected 6.18.46 to 6.18., inclusive semver unaffected 7.1.10 to 7.1., inclusive semver unaffected 7.2 to , inclusive original_commit_for_fix Other versions: affected

Identifiers: CVE-2026-80906
CNA: Linux
Tags: Linux kernel
Published: 4 Sept 2026
Updated: 6 Nov 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

No source has published a CVSS score for this record yet.

CISA KEV Not listed.
EPSS 0.0016, the 5th percentile, on 14 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

4 Sept 2026, 17:19 UTC Confirmed by the CVE List
4 Sept 2026, 18:18 UTC Confirmed by NVD

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.